H33-Key Benchmark

Universal post-quantum key encryption. Any key, any format, any size. One API call.

ML-KEM-768 AES-256-GCM HMAC-SHA3-256 SHA3-256 KDF

March 2026

v1.0 · FIPS 203

Latency (M4 Max, single-threaded)

Keygen

33 µs

ML-KEM-768 keypair

Encrypt

48 µs

KEM + GCM + HMAC

Decrypt

41 µs

HMAC verify first

Detect

0.8 µs

Format + algo parse

Envelope Wire Format (v1)

HDR

KYBER CT

HMAC

PAYLOAD

Hdr 5B

KEM 1,088B

Nonce 12B

Tag 16B

HMAC 32B

Header	5 B	Version, format, algo, size
KEM Ciphertext	1,088 B	Kyber-768 shared secret
Nonce + Tag	28 B	GCM IV + auth tag
HMAC	32 B	SHA3-256 integrity
Total overhead	1,153 B	Fixed per envelope

Auto-Detected Formats

PEM

PKCS#1, PKCS#8, SEC1, X.509

DER

Binary ASN.1, OID detect

JWK

RFC 7517 (RSA, EC, OKP)

OpenSSH

Ed25519, RSA, ECDSA

Raw

Base64, hex, binary

Any Size

API keys to PKCS#12 (10 MB)

Detected Algorithms

RSA EC P-256 P-384 secp256k1 Ed25519 X25519 AES

Tiers & Unit Cost

Key-0

3 u

Kyber encrypt/decrypt

Key-1

8 u

+ HMAC integrity

Key-2

15 u

+ Key wrapping

Key-3

25 u

+ Threshold + provenance

Gateway

35 u

TEE proxy, zero exposure

Key-FHE

50 u

FHE verify, never decrypted

<25K

$0.060

25K–250K

$0.040

250K–2.5M

$0.025

2.5M–25M

$0.012

25M+

$0.006

Same fungible units as Auth, Vault, Share, Shield & Health

Quick Setup

01 — KEYGEN

curl -X POST h33.ai/v1/key/keygen \
  -H "Authorization: Bearer h33_..."

Returns public_key + secret_key

02 — ENCRYPT

curl -X POST h33.ai/v1/key/encrypt \
  -d '{"data_b64":"...",
       "public_key_b64":"..."}'

Returns envelope + detected format

03 — DECRYPT

curl -X POST h33.ai/v1/key/decrypt \
  -d '{"envelope_b64":"...",
       "secret_key_b64":"..."}'

Returns original key in data_b64

h33.ai · NIST FIPS 203 · Zero external dependencies

API Docs Product Get API Key